CVE-2016-6018

EPSS 1.0%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

19 Jul 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738.

Affected products

IBM · Emptoris Contract Management

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/116738 http://www.ibm.com/support/docview.wss?uid=swg22005664 http://www.securityfocus.com/bid/99624